PLEASE AMEND THE SPECIFICATION AS FOLLOWS: 

On page 1, line 1 - page 2, line 13, please amend the specification as follows: 

VIGIP002 - Event Monitoring and Detection System 

By Inventors: 

Kevin Tu 
Peiwei Mi 
Jon Golovin 
Subhash Tantry 
Bing Ch e n 

CROSS-REFERENCE TO RELATED APPLICATIONS 

This application claims priority of U.S. Provisional Application No. 60/285,647, 
Attorney Docket No. VIGIP001P, entitled "BUSINESS EVENT MONITORING AND 
DETECTION SYSTEM," filed on April 19, 2001, which is hereby incorporated by reference for 
all purposes. 

This application also claims priority of U.S. Provisional Application No 60/296,948 . 
, Attorney Docket No. VIGIP007P, entitled "EVENT MONITORING, 
DETECTION AND NOTIFICATION SYSTEM HAVING SECURITY AND 
COLLABORATIVE FUNCTIONS," filed on June 8, 2001, which is hereby incorporated by 
reference for all purposes. 

This application also claims priority of U.S. Provisional Application No. 60/299,669 
, Attorney Docket No. VIGIP006P, entitled "COLLABORATIVE RESOLUTION 
AND TRACKING OF DETECTED EVENTS AND CONDITIONS," filed on June 19, 2001, 
which is hereby incorporated by reference for all purposes. 

This invention is also related to U.S. Patent Application Serial No. 09/886,393 

— , Attorney Docket No. VIGIP001, filed on the same day as this patent application, 
naming B. Chen et al. as inventors, and entitled "DATA RETRIEVAL AND TRANSMISSION 
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SYSTEM." That application is incorporated herein by reference in its entirety and for all 
purposes. 

This invention is also related to U.S. Patent Application Serial No. 
09/886,408 Attorney Docket No. VIGEP003, filed on the same day as this patent 

application, naming K. Tu et al. as inventors, and entitled "EVENT NOTIFICATION 
SYSTEM." That application is incorporated herein by reference in its entirety and for all 
purposes. 

This invention is also related to U.S. Patent Application Serial No. 09/886,402 
— , Attorney Docket No. VIGIP004, filed on the same day as this patent application, 
naming N. Kumar et al. as inventors, and entitled "SECURITY SYSTEM FOR EVENT 
MONITORING, DETECTION AND NOTIFICATION SYSTEM." That application is 
incorporated herein by reference in its entirety and for all purposes. 

This invention is also related to U.S. Patent Application Serial No. 09/886,403 

, Attorney Docket No. VIGIP005, filed on the same day as this patent application, 
naming P. Mi et al. as inventors, and entitled "EVENT MONITORING, DETECTION AND 
NOTIFICATION SYSTEM." That application is incorporated herein by reference in its entirety 
and for all purposes. 

On page 47, line 20 - page 48, line 20, please amend the specification as follows: 

The follow-by paired event type 2612 indicates that a first one of the specified set of 
events is to be followed by a second one of the specified set of events. In addition, it may be 
desirable to require that both events must occur (or be detected) within a specified period of 
time. For example, it may be desirable to detect when a first event (e.g., order placed) is 
followed (or not followed) by a second event (e.g., order shipped) within a specified period of 
time (e.g., two weeks). As another example, it may be desirable to detect a "ready for shipment 
within promised ship date - 2 days" event subsequent to an "order placed" event. In this 
manner, two different events may be effectively "joined." In this example, an entering event is 
received at block 2628. A time window or register timer is calculated at block 2630. Data (e.g., 
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attributes and/or metrics) associated with the event are stored at block 2632 if the persist flag is 
set. When it is determined that the appropriate second following event has been detected (e.g., 
within the specified period of time), this paired event has been matched at block 2634. The 
stored event data may then be removed from the database at block 2636 if the persist flag is set. 
In addition, an exception is generated (e.g., via construction of an exception object) at block 
2624. However, if the second following event is determined not to match the "paired event" 
specifications at block 2634, the second following event may be discarded at block 2638 . In 
other words, this second following event need not be stored if it is not the correct "following 
event." A timer mechanism 2640 is preferably maintained in order to determine whether timing 
requirements are satisfied. In addition, timing flows (e.g., fired timer events) are further 
indicated by dotted lines. Thus, in this example, if the second following event is never received, 
or not received within the specified time, the stored event data for the entering event (i.e., first 
event) is located at block 2642 and discarded at block 2644. More particularly, the persist flag 
may be checked to verify that the event is to be discarded in association with the follow-by 
paired event condition. 



On page 48, line 20- page 49, line 13, please amend as follows: 

The cancel-by paired event type 2614 indicates a first one of the specified set of events to 
be canceled upon detection of a second one of the specified set of events. More particularly, it 
may be desirable to cancel the first event when the second event occurs or is detected within a 
specified period of time of the first event. For example, the first event may be a "scheduled 
machine maintenance" which may be canceled by occurrence or detection of the second event, 
"machine up within 2 days." Thus, when the first, entering event is received at block 2646, a 



VIG1P002 



4 



time window or register timer is calculated at block 2648 to ensure that both events occur within 
the same time window. Event data (e.g., event attributes and/or metrics) may then be stored at 
block 2650 (e.g., when the persist flag is set). When the second matching event is detected at 
block 2652, the data associated with the first, entering event may be removed at block 2656 
(e.g, when the persist flag is set) and an exception object may be constructed and transmitted at 
block 2624. However, if the second event that is received is not the correct matching event, the 
data associated with the first event may be discarded at block 2654. If the second event is not 
received or not received within the specified time window, the data associated with the stored 
entering, first event may be located at block 2658 and discarded at block 2660 (e.g., if the persist 
flag is set). In this manner, it is possible for managers to evaluate personnel such as those 
responsible for machine maintenance. 



On page 14, lines 3-13, please amend the specification as follows: 

Once data is obtained by the adapter 102, at least a portion of the data is flagged 
(e.g., labeled, marked or indexed) to identify one or more business events of interest to 
the business. In this manner, the data is given meaning within a particular business 
context. An exemplary diagram illustrating data that is flagged to identify business 
events of interest to a business will be shown and described in further detail below with 
reference to FIG. 2. The flagged data 112 is then provided by the adapter 102 for access 
by other components. More particularly, the flagged data 112 may be transmitted via the 
message bus 1 10. For instance, as described above, other components that enable 
detection and notification of various events or states of events may access the modified 
data via the message bus 1 10. In this manner, the business events identified by the 
modified data may be monitored and detected. 
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